Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/38332e3133362e3231382e302f32332d3234203d3e203437353833.roa
File: 38332e3133362e3231382e302f32332d3234203d3e203437353833.roa (raw, json)
Hash identifier: yE2YFaW4VJBR0kkGkTAxeru4KbD6UP0Jaz39LVuO40E=
Subject key identifier: EE:52:09:42:B3:E8:D8:43:F7:61:90:0C:51:46:13:46:A4:55:ED:52
Certificate issuer: /CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959
Certificate serial: 0918E269D48CE9CBBF778757D7B3521B9BFC9D12
Authority key identifier: 09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/38332e3133362e3231382e302f32332d3234203d3e203437353833.roa
Signing time: Fri 20 Dec 2024 15:23:26 +0000
ROA not before: Fri 20 Dec 2024 15:18:26 +0000
ROA not after: Fri 19 Dec 2025 15:23:26 +0000
asID: 47583
IP address blocks: 83.136.218.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
09:18:e2:69:d4:8c:e9:cb:bf:77:87:57:d7:b3:52:1b:9b:fc:9d:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959
Validity
Not Before: Dec 20 15:18:26 2024 GMT
Not After : Dec 19 15:23:26 2025 GMT
Subject: CN=EE520942B3E8D843F761900C51461346A455ED52
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:73:91:86:14:99:cf:a1:cb:5b:32:be:d8:e8:
cd:35:92:87:b7:55:ab:e6:96:48:5a:19:96:d8:5e:
c9:c6:84:45:cb:e3:dd:2d:e2:2b:7c:f6:d8:39:6a:
4b:d7:c2:91:54:34:75:c8:2c:d1:dc:a5:9b:b5:0a:
32:32:7a:b4:01:0d:92:6d:dd:d9:eb:33:33:36:ec:
89:4b:12:0f:18:5a:28:af:b2:55:89:5b:17:f0:11:
d4:01:82:19:3b:38:af:a3:ac:23:65:e8:a7:d5:6f:
a8:5b:11:c5:d2:c1:2f:c4:16:db:46:72:f9:35:10:
57:18:ed:69:20:d7:87:76:48:03:5d:eb:8a:99:b4:
aa:63:7c:4b:4a:77:16:77:f0:a1:be:76:77:49:d4:
c8:dc:64:bd:6e:7d:77:37:0b:a9:3d:7a:95:13:43:
02:cb:07:c1:e2:d2:bd:56:1c:7a:77:b7:69:39:6d:
29:61:98:2e:ea:43:1c:e9:82:ca:6d:5f:56:75:11:
c5:03:62:55:f7:14:29:ac:a3:19:1e:fe:a1:8d:94:
2c:33:c4:6e:04:8b:5e:1c:b5:d3:65:fc:bb:5e:97:
4f:16:0d:f8:4e:30:0a:69:0a:f9:fc:91:ea:c1:3d:
fe:b3:11:d5:f7:c5:ac:b5:0c:ef:2d:18:f8:7f:69:
6c:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:52:09:42:B3:E8:D8:43:F7:61:90:0C:51:46:13:46:A4:55:ED:52
X509v3 Authority Key Identifier:
keyid:09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/38332e3133362e3231382e302f32332d3234203d3e203437353833.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.136.218.0/23
Signature Algorithm: sha256WithRSAEncryption
0f:2e:b9:5f:15:37:1b:9c:d1:21:21:af:b8:36:d2:0c:61:d2:
b3:6b:d4:61:e6:a0:69:4b:81:77:97:56:65:b0:48:b8:8b:24:
da:22:26:da:ce:c2:8e:b4:7d:49:09:60:34:aa:ba:52:f1:15:
0a:f5:6f:37:30:43:27:c6:92:23:da:ec:a2:2f:d8:6d:84:a3:
71:28:cf:41:37:c5:63:fd:f1:e6:6e:98:ae:dc:bc:b5:ff:c9:
8f:9c:1e:a2:e0:b7:73:58:a5:5f:e1:e2:a1:fa:8a:98:65:12:
46:69:d2:20:96:59:cc:7e:ad:bc:4f:62:00:de:6b:ba:0f:29:
d4:a8:8d:a2:b6:24:cc:8b:31:e0:fe:b0:1b:7f:c0:f4:e1:4b:
1d:8d:96:2e:98:26:66:e5:d8:84:36:12:5d:dc:94:84:38:40:
bb:d2:80:53:a3:37:db:86:4d:16:3c:d3:73:ab:af:c7:5d:42:
58:fb:6a:2b:dd:57:c7:0b:cc:d2:2a:dd:05:b9:31:c7:ee:5f:
2e:84:25:35:26:c9:67:01:89:2a:d5:40:35:d1:95:35:cb:1e:
68:48:b5:9a:15:c3:1c:b0:e7:90:f7:21:06:ea:8b:42:b0:e7:
c4:05:f8:37:7e:90:b6:c0:b0:6f:b5:40:2f:72:9c:96:a0:87:
25:c8:a2:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 00:09:35 2025 by rpki-client